Connector/J: malicious server crashes client JVM via unbounded result-set field-count allocation in ClientMessage.readPacket

MariaDB Connector/J parses result-set responses by reading the column count as a length-encoded integer straight from the wire and immediately uses it to size a Java array (`new ColumnDecoder[fieldCount]`) with no upper bound. A malicious or MITM MariaDB server can reply to any query - or to the …

default:
    int fieldCount = buf.readIntLengthEncodedNotNull();   // line 282: server-controlled
    ColumnDecoder[] ci;
    if (context.canSkipMeta() && this.canSkipMeta()) {
      ...
    } else {
      ci = new ColumnDecoder[fieldCount];                 // line 302: unbounded allocation …